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ENTITLED: SMART CARD WITH BACK UP 
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1 5 Intellectual Property Department 

600 North U,S. Highway 45 
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APPEAL BRIEF UNDER 37 C,F,R. S 1.192(c) 

20 

MS Appeal Brief - Patents 
Commissioner for Patents 
P.O. Box 1450 
25 Alexandria, VA 22313-1450 

Sir: 

Further to the Notice of Appeal filed on October 18, 2004, Applicant submits the 
30 present Appeal Brief. 
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I. REAL PARTY IN INTEREST 

The real party in interest is, Motorola, Inc. 

5 

.1.1. RELATED APPEALS AND INTERFERENCES 

There are no related appeals or interferences. 
10 HI. STATUS OF CLAIMS 

Claims 1-19 arc pending. Claims 1-19 are rejected and are the subject of the present 

appeal. 

1 5 IV, STATUS OF AMENDMENTS 

No amendments were filed subsequent lo final rejection. 
V. SUMMARY OF INVENTION 

20 

The inventions arc drawn generally to a method and apparatus for securely storing data 
in a personal data security device commonly known as a smart card (page 1, lines 4-6, Fig. 1, 
clement 100). An additional layer of security is provided to the smart card (100) in the form 
of a second part (112), such as an enabling key, of the smart card, which when coupled to a 
25 first part (1 02) of the smart card, enables the processor on the smart card to access and change 
stored information. II* the second part (1 12) is not accessible to the first part (102), the smart 
card function remains disabled (page 2, lines 10-14 and page 5, lines 19-22), 


30 


VI. ISSUES 

Whether claims 1-19 are allowable under 3 5 U.S.C. § l02overStorcketal. (U.S. 
Patent No. 5,434,395). 
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to 


Vll. GROUPING OF CLAIMS 

Claims 1» and 14 do not stand or fall with claim 8 or claim 18 regarding the rejection 
thereof under 35 U.S.C. § 102. 

VJJI. ARGUMENT 

Claim Limitations At Issue 

The limitations at issue in claims 1 > 8, 14, and 18 arc italicized below: 


1. A personal data storage apparatus comprised of: 

a. a first personal data storage device including a memory device storing: 
15 i. a first set of user data; 

ii. a first encryption key for encrypting at least part of said first set 

of user data; 

b. a first interface circuit coupled to said memory device granting 
conditional access to a third device to data therein using an appropriate data exchange 

20 protocol between the first personal data storage device and the third device only when a 

second personal data storage device is operatively coupled to said first personal data storage 
device; and 

c. a second interface circuit coupled to said memory device and providing 
communications access to the second personal data storage device. 

25 

8. A personal data storage apparatus comprised of: 

a. a first personal data storage device comprising: 
i. a first memory device storing: 
1 . a first set of user data; 
30 2. a first encryption key for encrypting at least part said 

first set of user data; 
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\u a first interface circuit coupled to said memory device granting 
conditional access to data therein using a predetermined protocol and only when a second 
personal data storage device is operatively coupled to said first personal data storage device; 

hi. a second interface circuit coupled to said memory device and 
5 providing access to a second personal data storage device; 

b. a second personal data storage device coupled to said first personal data 
storage device and being comprised of: 

i. a second memory device storing: 

1 . a substantially duplicate copy of said first set of user 

10 data; 

c. a second encryption key for encrypting at least part said first set of user 

data; 

h\ a second interface circuit coupled to said memory device 
granting conditional access to data therein using a predetermined protocol and only when 
15 said second personal data storage device is operatively coupled to said first personal data 

storage device; 

whereby user data in either said first or second personal data storage device is 
accessible and usable only when said first and second personal data storage devices are in 
communication with each other. 

20 

14. A method of securing access to data stored in a personal data storage device 
comprised of the steps of: 

a. storing personal data in first and second data storage devices that are 
capable of being operably coupled to each other; 
25 b. encrypting said personal data in a first data storage device using a first 

encryption key and encrypting it in said second data storage device using a second encryption 
key; 

c. granting access to a third device to said personal data in either said 
first data storage device or said second data storage device only when said first and second 
30 data storage devices are operatively coupled together. 
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1 8. A method of securing access to data stored in a personal data storage device 
comprised of the steps of: 

a. storing personal data in a swart card and an enabling key device that are 
capable of being operably coupled to each other; 
5 b. encrypting said personal data in the smart card using a first encryption 

key and encrypting said personal data in the enabling key device using a second encryption 
key, and 

C- prohibiting a transaction between the smart card and another device 
unless the smart card and the enabling key device are operatively coupled together. 

10 

Examiner's Allegation 

Claims 1-19 stand rejected under 35 U.S.C. § 102 over Storck et al_ (U.S. Patent No. 
5,434,395), 

15 

A pplicants* Argument 

"A claim is anticipated only if each and every element as set forth in the claim is 
found, either expressly or inherently described, in a single prior art reference" (MPEP §2131, 
20 citing Verdcgaal Bros. v. Union Oil Co. of California, 2 USPQ2d 1 05 1 , 1 053 (Fed. Cir. 
1987)). 

Applicants assert that Storck et al. does not disclose or suggest granting access to a 
third device to said personal data therein only when a second data storage device is operatively 
coupled to a first data storage device, as recited in independent claim 1 . Storck et al. also docs 
25 not disclose granting access to a third device to said personal data in either said first data 

storage device or said second data storage device only when said first and second data storage 
devices are operatively coupled together, as recited in independent claim 14. 

Applicants also assert Storck et aL does not disclose prohibiting a transaction between 
the smart card and another device unless the smart card and the enabling key device are 
30 operatively coupled together, as recited in independent claim 18. 

Applicants also assert that Storck et al. does not disclose or suggest second personal 
data storage device storing a substantially duplicate copy of a first set of user data stored in a 
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first personal data storage device, whereby user data in either said first or second personal data 
storage device is accessible and usable only when said first and second personal data storage 
devices are in communication with each other as recited in independent claim 8. 

Storck et al. uses an interfacing circuit that controls data transfer between one data 
5 carrier and another data carrier when the data carriers are identified as compatible(Abstract). 

There is no disclosure of granting access to said personal data in either said first data storage 
device or said second data storage device to a third device only when said first and second 
data storage devices are operatively coupled together and there is no disclosure of prohibiting 
a transaction between the smart card and another device unless the smart card and the enabling 
1 0 key device are operatively coupled together and such is not asserted by the original Office 
Action. 

Storck et al. docs not disclose that data in either said first or second personal data 
storage device is accessible and usable only when said first and second personal data storage 
devices are in communication with each other. In particular, Storck et al. discloses controlling 

15 data transfer between data carriers when they arc identified as compatible with each other. 

There is no disclosure that the data is not accessible and usable when two specific carriers are 
not in communication with each other. More particularly, Storck et al. expressly discloses that 
transactions can be carried out between several microcircuit cards (col. 4, lines 31-34). Storck 
ct al. does not disclose that data in either said first or second personal data storage device is 

20 accessible and usable only when said first and second personal data storage devices are in 
communication with each other or prohibiting a transaction between the smart card and 
another device unless the smart card and the enabling key device are operatively coupled 
together. 

Furthermore, Storck et al. does not disclose that each carrier having a duplicate copy of 
25 data where data is accessible and usable only when the carriers are in commimication with 

each other, as recited in independent claim 8. In particular, Storck et al. is directed to an 
interfacing circuit for controlling data transfer between the two carriers, which is the opposite 
of each carrier having a duplicate copy of data where data is accessible and usable only when 
the carriers are in communication with each other. In particular, if each carrier in Storck et al. 
30 had a duplicate copy of data, it would be unnecessary to use an interfacing circuit to control 

data transfer between the carriers- Thus, Storck et ah does not disclose that each carrier 
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having a duplicate copy of data where data is accessible and usable only when the carriers arc 
in communication with each other, as recited in independent claim 8. 

In the Response to Amendment section, the final Office Action alleges Storck ct al. 
discloses, at coL 12, lines 45-48, *The authorization level is divided between two personal 
5 data storage devices such that data transfer to a third device is possible only when a first and a 
second personal data storage device are coupled together or used simultaneously, e.g. 
operating at the same time/' Applicants disagree. In particular, col. 12, lines 45-48 do not 
disclose data transfer to a third device is possible only when a first and a second personal data 
storage device are coupled together.'* More particularly, the cited passage only discloses it is 

10 "possible to divide up an authorization level between two or several slave cards which will 

then need to be used in a complementary manner or simultaneously." However, this not the 
disclosure of two or several slave cards being coupled together. In particular, 
"simultaneously" only describes slave cards being used at the same time. It is not the 
disclosure of a two data storage devices being operatively coupled together. Using two 

15 devices in a complementary manner is not the disclosure of a two data storage devices being 
operatively coupled together. For example, each device may be used in a complementary 
manner or simultaneously by each being separately coupled to the third device without being 
operatively coupled to each other. In particular, Fig. 4 expressly illustrates numerous slots or 
fields 43 and Fig. 5 also expressly illustrates numerous slots or fields 49. Thus, cards are used 

20 simultaneously by coupling each to the fields of the device 42 or 46, but not to each other. To 

the contrary, applicants are positively claiming only granting access to a third device only 
when two devices are operutivcly coupled together and such is not disclosed by Storck et al. 

Furthermore, Storck et al. expressly discloses that a user can carry out any data 
processing operation in combination with one or several microcircuit cards (col. 13, lines 40- 

25 43). This is the exact opposite of the claimed granting access to a third device to data in a 
memory of a first device only when a second personal data storage device is operatively 
coupled to the first device or prohibiting a transaction between the smart card and another 
device unless the smart card and the enabling key device are operatively coupled together. In 
particular, this expressly illustrates that access is granted to a third device, the device in Fig. 4, 

30 to data in a first device, such as one microcircuit card, without the presence of a second 

device, a second microcircuit card- This illustrates how Storck ct al. clearly does not disclose 
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granting access to a third device to data in a memory of a first device only when a second 
personal data storage device is operativeiy coupled to the first device. 

Thus, Storck et ah does not disclose or suggest granting access to a third device to said 
personal data therein only when a second data storage device is operativeiy coupled to a first 
5 data storage device, as recited in independent claim 1 . Storck el al. also docs not disclose 

granting access to a third device to said personal data in either said first data storage device or 
said second data storage device only when said first and second data storage devices are 
operativeiy coupled together, as recited in independent claim 14. Storck et al. also does not 
disclose prohibiting a transaction between the smart card and another device unless the smart 
10 card and the enabling key device are operativeiy coupled together, as recited in independent 

claim 18. 

In the Response to Amendment section, the final Office Action also alleges Storck et 
al. discloses, at col. 4, lines 52-58, that data is not accessible when two specific carrier, 
pcrsooaJ data storage devices, arc not in communication with each other. Unfortunately, the 

15 Office Action mischaracterizes the referenced passage. In particular, the referenced passage 

expressly states, "The invention further has the advantage of enabling a person owning or in 
possession of a card to read the data contained therein. Obviously, this can mean that such 
information cannot be read until the owner has entered a personal identification number code. 
Any other operation carried out by the use of the card may necessitate the owner introducing 

20 said code." However, this is the exact opposite of what the Office Action is alleging. In 
particular, the cited passage clearly illustrates that data in a card can be read without the 
presence of another device. More particularly, the presence of another device is not required 
because the data in a card can be read by merely entering a personal identification number. 
This is completely contradictory to the claimed invention, which positively recites data in 

25 either the first or second personal data storage device is accessible and usable only when the 

first and second personal data storage devices are in communication with each other. This is 
also contradictory to claim 18, which positively recites prohibiting a transaction between the 
smart card and another device unless the smart card and the enabling key device arc 
operativeiy coupled together. In fact that Office Action expressly admits that data cannot be 

30 read without authorization whether two specific carriers arc in communication or not This 

implies that data can be read with authorization when two carriers are not in communication, 
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which is not the case of data being accessible and usable only when two devices arc in 
communication with each other. 

Thus, Storck et at does not disclose or suggest granting access to a third device to said 
personal data therein only when a second data storage device is opcrativcly coupled to a first 
5 data storage device> as recited in independent claim 1 . Slorck cl al. also does not disclose 

granting access lo a third device to said personal data in eilher said first data storage device or 
said second data storage device only when said first and second data storage devices are 
operatively coupled together, as recited in independent claim 14. 

Also, Storck el al. docs not disclose prohibiting a transaction between Ihc smart card 
10 and another device unless the smart card and the enabling key device are operatively coupled 
together, as recited in independent claim 1 8. 

Additionally, Storck et al. does not disclose or suggest second personal data storage 
device storing a substantially duplicate copy of a first set of user data stored in a first personal 
data storage device, whereby user data in either said first or second personal data storage 
1 5 device is accessible and usable only when said first and second personal data storage devices 
arc in communication with each other as recited in independent claim 8. 

Therefore, Applicants respectfully submit that independent claims 1, 8, 14, and 18 
define patentable subject matter. The remaining claims are cither not rejected or depend from 
the independent claims and therefore also define patentable subject matter. Accordingly, 
20 Applicants respectfully request the withdrawal of the rejection under 35 LIS.C. § 102. 

Kindly reverse and vacate the rejection of claims 1, 8, 14, and 18 under 35 U,S.C § 
102, with instructions for the Examiner to allow claims 1-19. 

CONCLUSION 

25 

In view of the discussion above, the claims of the present application are in condition 
for allowance. Kindly withdraw any rejections and objections and allow this application to 
issue as a United States Patent without further delay. 


10 
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The Commissioner is hereby authorized to deduct the amount of $340 for filing a brief 
in support of an appeal and any fees arising as a result of this Appeal Brief or any other 
communication from or to credit any overpayments to Deposit Account No. 50-21 17. 



Registration No. 45,314 


Dated: November 15, 2004 


Phone No. (847) 523-2585 


Fax No. (847) 523-2350 

Please *send correspondence to; 

Motorola, Inc. 

Intellectual Property 

600 North U.S. Highway 45 

Libertyville, EL 60048 
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JX. APPENDIX 

1. (previously presented) A personal data storage apparatus comprised of: 

a. a first personal data storage device including a memory device storing: 
5 La first se t o f user data; 

ii, a first encryption key for encrypting at least part of said first set 

of user data; 

b. a first interface circuit coupled to said memory device granting 
conditional access to a third device to data therein using an appropriate data exchange protocol 

10 between the first personal data storage device and the third device only when a second 

personal data storage device is openitivery coupled to said first personal data storage device; 
and 

c. a second interface circuit coupled to said memory device and providing 
communications access to the second personal data storage device. 

2. (original) The personal data storage apparatus of claim 1 further comprised of a 
processor operatively coupled to said memory device and to said first and second interface 
circuits. 

20 3. (original) The personal data storage apparatus of claim 1 wherein, said second 

personal data storage device is operatively coupled to said first personal storage device using a 
mechanical coupling. 


4. (original) The personal data storage apparatus of claim 3 wherein said 
25 mechanical coupling is a connector. 

12 
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5 


5. (original) The personal data storage apparatus of claim 1 wherein said second 
personal data storage device is operatively coupled to said first personal storage device using a 
wireless connection. 

6. (original) The personal data storage apparatus of claim 5 wherein said wireless 
connection is a radio link. 


7. (original) The personal data storage apparatus of claim I , where an agent of the 
1 0 issuer of the personal data storage apparatus can reclaim the user data from a single part of the 

personal data storage apparatus. 

8. (previously presented) A personal data storage apparatus comprised of: 
a, a fin; I personal data storage device comprising: 

15 i. a first memory device storing: 

1 . a first set of user data; 

2. a first encryption key for encrypting at least part said 

first set of user data; 

ii. a first interface circuit coupled to said memory device granting 
20 conditional access to data therein using a predetermined protocol and only when a second 

personal data storage device is operatively coupled to said first personal data storage device; 

Hi. a second interface circuit coupled lo said memory device and 
providing access to a second personal data storage device; 
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b. a second personal data storage device coupled to said first personal data 
storage device and being comprised of: 

i. a second memory device storing: 

1. a substantially duplicate copy of said first set of user 

5 data; 

c, a second encryption key for encrypting at least pan said first set of user 

data; 

ii. a second interface circuit coupled to said memory device 
granting conditional access to data therein using a predetermined protocol and only when said 

10 second personal data storage device is operaiivcly coupled to said first personal data storage 

device; 

whereby user data in cither said first or second personal data storage device is 
accessible and usable only when said first and second personal data storage devices are in 
communication with each other. 

15 

9. (original) The personal data storage apparatus of claim 8 wherein said first personal 
data storage device is further comprised of a processor, operatively coupled to said first 
memory device and to said first and second interface circuits. 

20 10. (original) The personal data storage apparatus of claim 9 wherein said second 

personal data storage device is operatively coupled to said first personal storage device using a 
mechanical connector. 


14 


PAGE 15/18 * RCVD AT 11115/2004 6:20:22 PM [Eastern Standard Time] * SVR:USPT0-EFXRF-1/3 * DNIS:8729306 * CSID: 1 8475232350 * DURATION (mm-$s):04-16 


NOU- 15-2004 18:09 FROM : MOTOROLA PCS IPD 18475232350 


TO:USPTO 


P.16>- 


Appl. No. 09/575,749 
Atiy. Docker No. CS10614 

11. (original) The personal data storage apparatus of claim 8 wherein said second 
personal data storage device is operatively coupled to said first personal storage device using a 
wireless connection. 

5 12. (original) The personal data storage apparatus of claim 8 wherein said wireless 

connection is a radio link. 

13. (original) The personal data storage apparatus of claim 8, where an agent of the 
issuer of the personal data storage apparatus can reclaim the user data from a single part of the 

10 personal data storage apparatus. 

14. (previously presented) A method of securing access to data stored in a personal 
data storage device comprised of the steps of: 

a. storing personal data in first and second data storage devices that are 
15 capable of being operably coupled to each other; 

b. encrypting said personal data in a first data storage device using a first 
encryption key and encrypting it in said second data storage device using a second encryption 
key; 

c. granting access to a third device to said personal data in either said first 
20 data storage device or said second data storage device only when said first and second data 

storage devices are operatively coupled together. 

15. (previously presented) The method of claim 14 wherein said step of granting 
access to a third device to said personal data in either said first data storage device or said 

15 
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second data storage device only when said first and second personal data storage devices are 
operatively coupled together is comprised of the step of granting access when said first and 
second personal data storage devices are coupled together through at least one of either a 
wireless data link or a mechanical connector. 

5 

16. (original) The method of claim 14 wherein daia stored in said first storage 
device can be recovered from data stored in said second storage device. 

17. (original) The method of claim 14 wherein said first and second encryption 
10 keys are the same. 

18. (previously presented) A method of securing access to data stored in a personal 
data storage device comprised of the steps of: 

a. storing personal data in a smart card and an enabling key device that are 
15 capable of being operably coupled to each other; 

b. encrypting said personal data in the smart card using a first encryption 
key and encrypting said personal data in the enabling key device using a second encryption 
key; and 

c. prohibiting a transaction between the smart card and another device 
20 unless the smart card and the enabling key device are operatively coupled together. 

19. (previously presented) The method of claim 1 8, wherein said step of 
prohibiting a transaction between the smart card and another device unless the smart card and 
the enabling key device are operatively coupled together is comprised of the step of 

16 
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prohibiting the transaction unless the smart card and the enabling key device are coupled 
together through at least one of either a wireless data link or a mechanical connector. 


17 
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